topic Replace ACS 5.8 with ISE for PPPoE auth in Network Access Control

Replace ACS 5.8 with ISE for PPPoE auth

nzerth — Wed, 18 Apr 2018 09:31:05 GMT

Customer is currently using ACS 5.8 and does PPPoE Authentication for his 800er Cisco Routers via ACS. Can this functionality be achieved with ISE?

Re: Customer ISE question

ognyan.totev — Wed, 18 Apr 2018 11:39:24 GMT

Device	Validated OS ¹⁷	AAA	Profiling	BYOD	Guest	Posture	MDM	TrustSec ¹⁸
Device	Minimum OS 19	AAA	Profiling	BYOD	Guest	Posture	MDM	TrustSec ¹⁸
Cisco Routers
ISR 88x, 89x Series	IOS 15.3.2T(ED)	√	!	X	!	X	X	√
ISR 88x, 89x Series	IOS 15.2(2)T	!	!	X	!	X	X	√

Maybe this will answer you.

Best regards.

Re: Customer ISE question

rmueller@cisco.com — Wed, 18 Apr 2018 12:25:33 GMT

Hi,

thanks a lot for the response, but this does unfortunatley not answer this question. The question is more if ISE is able to authenticate PPPoe-Connections at all (I don't know if such an authentication request contains special RADIUS attributes which are probably not supported by ISE)....

Re: Customer ISE question

Nidhi — Wed, 18 Apr 2018 16:19:08 GMT

Researching !

Re: Customer ISE question

nzerth — Fri, 20 Apr 2018 07:29:39 GMT

Hey guys,

any news on this topic?

Thanks a lot for your support!

Re: Customer ISE question

hslai — Wed, 25 Apr 2018 03:24:34 GMT

Supposedly the existing PPPoE using ACS as RADIUS servers, then ISE should work the same.

I would suggest to check the existing configuration for this in ACS and try migrating it to ISE in a lab setup.

Re: Replace ACS 5.8 with ISE for PPPoE auth

ldanny — Wed, 25 Apr 2018 09:00:02 GMT

Here are some attribute values you might want to focus on your NAD and run a sniffer or a tcp dump from ISE .

Extended NAS-Port-Type and NAS-Port Support - Cisco

Re: Replace ACS 5.8 with ISE for PPPoE auth

rmueller@cisco.com — Wed, 25 Apr 2018 13:05:36 GMT

Hi all,

thanks a lot for the responses. Will check with the customer this week.

Roland

Roland Mueller

CONSULTING SYSTEMS ENGINEER.SECURITY SALES

rmueller@cisco.com<mailto:rmueller@cisco.com>

Tel: +49 711 2391 1306

Cisco Systems, Inc.

City Plaza - 4th Floor Rotebuehlplatz 21-25

STUTTGART

70178

Germany

cisco.com

Think before you print.

This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.

Please click here<http://www.cisco.com/web/about/doing_business/legal/cri/index.html> for Company Registration Information.